Security firm SourceDNA said on Sunday that a group of applications using Guangzhou Youmi Mobile Technology Co‘s third-party software development kit uses private APIs to collect personal and private data — including email addresses, Apple IDs and device identification markers — before sending this data to the Chinese firm’s servers.